Dynamic data masking BigQuery

Question

Is there any feature in the BigQuery roadmap to support dynamic data masking? For example, displaying masked data based on the user's roles. I have explored DLP which helps in storing masked data in BigQuery, but with that approach, one will have to create two versions of the same table masked and unmasked. Please refer to the following link as an example to get additional context to my ask. (Example Link)

Answer 1

As noted by Guillaume, the correct workaround at the moment is to use BigQuery Column-level security for controlling access to specific table columns.

As for the specific Data Masking feature where the column data is returned but masked, this is indeed on the BigQuery roadmap and is expected to be released as part of BigQuery Column-level security. However, there isn't any ETA on the release yet.

You may refer to Google's Bigquery release notes to keep in loop with the latest BigQuery updates and feature releases.

Answer 2

There isn't the exact same feature. And, indeed, you have to store the 2 forms of data, masked and unmasked.

However, you have a new feature named CLS: Column Level Security. With this feature you can allow user to see, or not, some column. In your use case, you can show to the user only the unmasked column

Answer 3

For anyone seeing this.. just use a authorized view.. You can hash the data if you need something deterministic or you can use a string/regex function to mask the data.